LI
Product
libtiff
262
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 70Medium 122Low 5
Watch
Add libtiff to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-30775 | 5.5 | May 19 | A vulnerability was found in the libtiff library Affected: 4.4.0 |
| CVE-2023-30774 | 5.5 | May 19 | A vulnerability was found in the libtiff library Affected: 3.5.1 through 4.4.0 |
| CVE-2023-2731 | 5.5 | May 17 | A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file Affected: before 4.5.0 |
| CVE-2023-30086 | 5.5 | May 9 | Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c Affected: 4.0.7 |
| CVE-2022-4645 | 5.5 | Mar 3 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: 3.5.1 through 4.4.0 |
| CVE-2023-0804 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0803 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0802 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0801 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a… Affected: through 4.4.0 |
| CVE-2023-0800 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0799 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0798 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0797 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a… Affected: through 4.4.0 |
| CVE-2023-0796 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0795 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2022-48281 | 5.5 | Jan 23 | processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image Affected: through 4.5.0 |
| CVE-2022-3570 | 5.5 | Oct 21 | Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file… Affected: >=3.9.0, <=4.4.0 |
| CVE-2022-1354 | 5.5 | Aug 31 | A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function Affected: before 4.4.0 |
| CVE-2022-2953 | 5.5 | Aug 29 | LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2022-2869 | 5.5 | Aug 17 | libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine Affected: before 4.4.0 |
| CVE-2022-2868 | 5.5 | Aug 17 | libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to… Affected: before 4.4.0 |
| CVE-2022-2867 | 5.5 | Aug 17 | libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write Affected: before 4.4.0 |
| CVE-2022-34266 | 5.5 | Jul 19 | The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different vulnerability than… Affected: 4.0.3-35 |
| CVE-2022-1623 | 5.5 | May 11 | LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: 4.3.0 |
| CVE-2022-1622 | 5.5 | May 11 | LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: 4.3.0 |
| CVE-2022-1056 | 5.5 | Mar 28 | Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: 4.3.0 |
| CVE-2022-0924 | 5.5 | Mar 11 | Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: 4.3.0 |
| CVE-2022-0909 | 5.5 | Mar 11 | Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: 4.3.0 |
| CVE-2022-0908 | 5.5 | Mar 11 | Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via… Affected: through 4.3.0 |
| CVE-2022-0907 | 5.5 | Mar 11 | Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: 4.3.0 |
| CVE-2022-0562 | 5.5 | Feb 11 | Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service… Affected: 4.0.0 through 4.3.0 |
| CVE-2022-0561 | 5.5 | Feb 11 | Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of… Affected: 3.9.0 through 4.3.0 |
| CVE-2022-22844 | 5.5 | Jan 10 | LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field Affected: 4.3.0 |
| CVE-2020-35522 | 5.5 | Mar 9 | In LibTIFF, there is a memory malloc failure in tif_pixarlog.c Affected: before 4.2.0 |
| CVE-2020-35521 | 5.5 | Mar 9 | A flaw was found in libtiff Affected: before 4.2.0 |
| CVE-2016-10371 | 5.5 | May 10 | The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit)… Affected: 4.0.6 |
| CVE-2016-5322 | 5.5 | Apr 11 | The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image Affected: through 4.0.6 |
| CVE-2017-7595 | 5.5 | Apr 9 | The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image Affected: 4.0.7 |
| CVE-2017-7594 | 5.5 | Apr 9 | The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image Affected: 4.0.7 |
| CVE-2017-7593 | 5.5 | Apr 9 | tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a… Affected: 4.0.7 |
| CVE-2016-10267 | 5.5 | Mar 24 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8 Affected: 4.0.7 |
| CVE-2016-10266 | 5.5 | Mar 24 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22 Affected: 4.0.7 |
| CVE-2015-7313 | 5.5 | Mar 17 | LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file Affected: before 4.0.7 |
| CVE-2016-5315 | 5.5 | Mar 7 | The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image Affected: through 4.0.6 |
| CVE-2016-10095 | 5.5 | Mar 1 | Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta,… Affected: 4.0.7 |
| CVE-2016-9532 | 5.5 | Feb 6 | Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a… Affected: through 4.0.6 |
| CVE-2016-5102 | 5.5 | Feb 6 | Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (segmentation fault) via a… Affected: through 4.0.6 |
| CVE-2016-9273 | 5.5 | Jan 18 | tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode Affected: 4.0.6 |
| CVE-2015-8683 | 5.5 | Apr 13 | The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image Affected: 4.0.6 |
| CVE-2015-8665 | 5.5 | Apr 13 | tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image Affected: 4.0.6 |
